multer vulnerable to Denial of Service via a pending asynchronous fileFilter after request teardown

影響: npm:multer >= 2.0.0, < 2.5.0 → 2.5.0

When multer is configured with an asynchronous fileFilter, a single request can crash the Node.js process. If a request is aborted (for example when one file is rejected) while another file's async fileFilter is still pending, the pending callback later resumes a parsing stream that multer has already torn down. busboy then emits an error on a stream that no longer has an error listener, which Node raises as an unhandled 'error' event, and the process exits. A single unauthenticated request is…

GitHub Advisory Databaseで読む

2026/10/24 07:08、GitHub Advisory Databaseが「multer vulnerable to Denial of Service via a pending asynchronous fileFilter after request teardown」を公開しました (種別: 脆弱性アドバイザリ)。重大度は「重要」(high) です。関連する技術: JavaScript / Node.js。CVE: CVE-2026-113872。